One of the main challenges of securing broadcast communication is source authentication, or enabling receivers of broadcast data to verify that the received data really originates from the claimed source and was not modified en route. This problem is complicated by mutually untrusted receivers and unreliable communication environments where the sender does not retransmit lost packets. This article presents the TESLA (Timed Efficient Stream Loss-tolerant Authentication) broadcast authentication protocol, an efficient protocol with low communication and computation overhead, which scales to large numbers of receivers, and tolerates packet loss. TESLA is based on loose time synchronization between the sender and the receivers. Despite using purely symmetric cryptographic functions (MAC functions), TESLA achieves asymmetric properties. We discuss a PKI application based purely on TESLA, assuming that all network nodes are loosely time synchronized.

/pdf/the-tesla-broadcast-authentication-protocol-29wvjgz56m.pdf

The TESLA Broadcast Authentication Protocol

One of the main challenges of securing multicast communicationis source authentication,or enabling receivers of multicast data to verify that the received data originated with the claimed source and was not modified enroute. The problem becomes more complex in common settings where other receivers of the data are not trusted, and where lost packets are not retransmitted. Several source authentication schemes for multicast have been suggested in the past, but none of these schemes is satisfactorily efficient in all prominent parameters. We recently proposed a very efficient scheme, TESLA, that is based on initial loose time synchronization between the sender and the receivers, followed by delayed release of keys by the sender. This paper proposes several substantial modifications and improvements to TESLA. One modification allows receivers to authenticate most packets as soon as they arrive (whereas TESLArequires buffering packets at the receiver side, and provides delayed authentication only). Other modifications improve the scalability of the scheme, reduce the space overhead for multiple instances, increase its resistance to denial-of-service attacks, and more.

/pdf/efficient-and-secure-source-authentication-for-multicast-1lcluzagpq.pdf

Efficient and Secure Source Authentication for Multicast.

In the past two decades, reversible data hiding (RDH), also referred to as lossless or invertible data hiding, has gradually become a very active research area in the field of data hiding. This has been verified by more and more papers on increasingly wide-spread subjects in the field of RDH research that have been published these days. In this paper, the various RDH algorithms and researches have been classified into the following six categories: 1) RDH into image spatial domain; 2) RDH into image compressed domain (e.g., JPEG); 3) RDH suitable for image semi-fragile authentication; 4) RDH with image contrast enhancement; 5) RDH into encrypted images, which is expected to have wide application in the cloud computation; and 6) RDH into video and into audio. For each of these six categories, the history of technical developments, the current state of the arts, and the possible future researches are presented and discussed. It is expected that the RDH technology and its applications in the real word will continue to move ahead.

Reversible Data Hiding: Advances in the Past Two Decades

Broadcast authentication is a fundamental security service in distributed sensor networks. This paper presents the development of a scalable broadcast authentication scheme named multilevel μTESLA based on μTESLA, a broadcast authentication protocol whose scalability is limited by its unicast-based initial parameter distribution. Multilevel μTESLA satisfies several nice properties, including low overhead, tolerance of message loss, scalability to large networks, and resistance to replay attacks as well as denial-of-service attacks. This paper also presents the experimental results obtained through simulation, which demonstrate the performance of the proposed scheme under severe denial-of-service attacks and poor channel quality.

Multilevel μTESLA: Broadcast authentication for distributed sensor networks

Broadcast authentication is a fundamental security service in distributed sensor networks. A scheme named $\mu$TESLA has been proposed for efficient broadcast authentication in such networks. However, $\mu$TESLA requires initial distribution of certain information based on unicast between the base station and each sensor node before the actual authentication of broadcast messages. Due to the limited bandwidth in wireless sensor networks, this initial unicast-based distribution severely limits the application of $\mu$TESLA in large sensor networks. This paper presents a novel technique to replace the unicast-based initialization with a broadcast-based one. As a result, $\mu$TESLA can be used in a sensor network with a large amount of sensors, as long as the message from the base station can reach these sensor nodes. This paper further explores several techniques that improve the performance, the robustness, as well as the security of the proposed method. The resulting protocol satisfies several nice properties, including low overhead, tolerance of message loss, scalability to large networks, and resistance to replay attacks as well as some known Denial of Service (DOS) attacks.

Efficient Distribution of Key Chain Commitments for Broadcast Authentication in Distributed Sensor Networks

Disclose herein is a method for protecting sensitive data (D) in an entry of a log file for later audit, comprising: - encrypting the sensitive data (D) in the log entry by using a random cryptographic key (A), - for each auditor authorized to access the log entry, encrypting the random cryptographic key (A) by using an auditor's personal cryptographic key (K), and - for each auditor not authorized to access the log entry, encrypting a fake cryptographic key (H(A) having the same properties as the random cryptographic key (A) by using an auditor's personal cryptographic key (K).

/pdf/secure-logging-for-irrefutable-administration-4aqy8qe2jc.pdf

Secure Logging For Irrefutable Administration

Broadcast and multicast communications present new problems with respect to security. In particular the individual authentications of the senders to be efficient require novel solutions with respect to the unicast ones. The paper presents an efficient authentication protocol and discusses its implementation in an audio conferencing application.

Individual single source authentication on the MBONE

We present a protocol for the exchange of individually authenticated data streams among N parties. Our authentication procedure is fast, because it only requires the computation of hash functions - we do not need digital signatures, that are substantially less efficient. The authentication information is also short: two hash values for every block of data. Since there are no shared secrets, this information does not grow with N, the number of parties.

/pdf/chained-stream-authentication-21cxvkhq8w.pdf

Chained Stream Authentication

In this paper, a block-based watermarking scheme based on the Singular Value Decomposition (SVD) is proposed. Our watermark, a pseudo-random Gaussian sequence, is embedded by modifying the angles formed by the right singular vectors of each block of the original image. The orthogonality property of the right singular vector matrix is preserved during the embedding process. Several experiments have been carried out to test the performance of the proposed scheme against different attack scenarios. We conclude that the proposed scheme is resistant against common signal processing operations and attacks, while it preserves the quality of the original image.

https://www.mdpi.com/1999-4893/2/1/46/pdf

A Novel Block-based Watermarking Scheme Using the SVD Transform

https://iris.unito.it/bitstream/2318/1528692/1/sigpro_fragile_watermark_color_images.pdf

Davide Cavagnino

Papers

Secure Logging For Irrefutable Administration

Individual single source authentication on the MBONE

Chained Stream Authentication

A Novel Block-based Watermarking Scheme Using the SVD Transform

A modular framework for color image watermarking